Mark Simos

Mark Simos

Mastodon @markasimos@infosec.exchange
⚔ Compare ☆ Watch Own this channel?
🤝

Make a deal with Mark Simos

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $12→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $30→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $16→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $36/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $18/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $24/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $30/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→

Every booking is a normal escrow-protected deal.

Followers
372
Account age
3 yrs

Known for

Are you still applying security patches as an exception? or patching by default? One of the biggest impacts of Mythos, MDASH, and other AI vuln discovery/exploit technologies is that you have to get really good at all aspects of software vulnerability management. You have to be apply to rapidly app3 views Are you still applying security patches as an exception? or patching by default? One of the biggest impacts of Mythos, MDASH, and other AI vuln discovery/exploit technologies is that you have to get really good at all aspects of software vulnerability management. You have to be apply to rapidly app One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics) Doing this successfully requires having a plan and a political toolbox to implement it. I have started putting one together based on what I see work at organizations. 3 views One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics) Doing this successfully requires having a plan and a political toolbox to implement it. I have started putting one together based on what I see work at organizations. The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn! Microsoft just released 200+ pages of documentation for the Microsoft Security Adoption Framework (SAF) that includes and is built on the MCRA, CISO Workshop, and other SAF workshops SAF also ties together all of Micro1 views The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn! Microsoft just released 200+ pages of documentation for the Microsoft Security Adoption Framework (SAF) that includes and is built on the MCRA, CISO Workshop, and other SAF workshops SAF also ties together all of Micro I just posted the slides for my 'Security is a Team Sport (but we are NOT playing like a team)' session at BSides Tampa Check out the Events page for the link to those slides as well as videos/slides from previous talks. https://zerotrustplaybook.com/events/ FYI, I tweaked the wording on a few of th1 views I just posted the slides for my 'Security is a Team Sport (but we are NOT playing like a team)' session at BSides Tampa Check out the Events page for the link to those slides as well as videos/slides from previous talks. https://zerotrustplaybook.com/events/ FYI, I tweaked the wording on a few of th

📊 Post engagement

2
Avg engagement / post
0.5%
Engagement vs followers
Nov 2022
On Mastodon since

🔥 Top post: Are you still applying security patches as an exception? or patc · 3 likes + reposts

📊 Activity & format

Posting cadence
1.2 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 0 text · 12 image · 0 video.
Follower / following
13×
Follows 28 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗
🔥 Top post Are you still applying security patches as an exception? or patching by default? One of the biggest impacts of Mythos, MDASH, and other AI vuln discovery/exploit technologies is that you have to get really good at all aspects of software vulnerability management. You have to be… ★ 3
We need to have an honest conversation about legacy systems… Most organizations have unsupported systems that they aren’t able to change or move and this creates business risk. This is normal and common, no surprise. What's changing is tha… The Azure Security Podcast episode just dropped for the new Security Adoption Framework (SAF) documentation. We cover the recent release of this clear framework for adopting a modern end to end security approach (including AI) across all o… The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn! Microsoft just released 200+ pages of documentation for the Microsoft Security Adoption Framework (SAF) that includes and is built on the MCRA, CISO Workshop… ★ 1 Hey y'all I just recorded my first video in my new 'Mark on Cybersecurity' YouTube channel! I started off with an episode describing free resources from Microsoft, The Open Group, and The Zero Trust Playbook that you can use to improve you… I keep hearing people are "Automating Tier 1 with AI" (or some other job) and I think words really matter here. ◾ Are you trying to replace a human person with AI? Assigning a human role to AI? ◾ Are you automating the tasks currently bein… Security can never “win the game” - it's not the job we signed up for. We are the defense squad so we don't score goals or points - we just keep opponents from scoring points. Our business colleagues and users are the offensive squads … One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics) Doing this successfully requires having a plan and a political toolbox to implement it. I have started putti… ★ 3 Understanding and using the Why/What/How Chain is critical for everyone in security. One thing I talked about in my recent BSides Tampa talk was how to truly change someone’s mind and behavior pattern (for security or anything else). Infl… I just posted the slides for my 'Security is a Team Sport (but we are NOT playing like a team)' session at BSides Tampa Check out the Events page for the link to those slides as well as videos/slides from previous talks. https://zerotrustp… ★ 1 Just putting the finishing touches on slides for my BSides Tampa talk "Security is a Team Sport ... but we are NOT playing as a team" This is going to be a fun one with antipatterns, hard-won lessons learned, tips, tricks, and more! I real… ★ 1 I just posted the slides for my BSides South Florida talk on the events page - https://zerotrustplaybook.com/events/ This version added a new section on AI because of all the misperceptions on this technology (very powerful, but not pana…

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 2 views per post.
📤Posts about 1.2× per week.

🛡️ Audience credibility

66/100 Good
  • Est. 89% real, active audience · Low fake-follower risk.
  • Engagement (~0.5% of followers engage each post) is around typical for Mastodon.
  • Established account (3+ years old).
Est. authentic audience
89%
Fake-follower risk
Low
Data confidence
High

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Lead Cybersecurity Architect • Executive and Board Advisor • Keynote Speaker • Professional Storyteller https://www.youtube.com/@MarkonCybersecurity

📸 Gallery

We need to have an honest conversation about legacy systems… Most organizations have unsupported systems that they aren’t able to change or move and this creates business risk. This is normal and common, no surprise. What's changing is that AI makes it easier and cheaper for threat actors to (1) con The Azure Security Podcast episode just dropped for the new Security Adoption Framework (SAF) documentation. We cover the recent release of this clear framework for adopting a modern end to end security approach (including AI) across all of security (~200 pages of new documentation) At the center of Are you still applying security patches as an exception? or patching by default? One of the biggest impacts of Mythos, MDASH, and other AI vuln discovery/exploit technologies is that you have to get really good at all aspects of software vulnerability management. You have to be apply to rapidly app The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn! Microsoft just released 200+ pages of documentation for the Microsoft Security Adoption Framework (SAF) that includes and is built on the MCRA, CISO Workshop, and other SAF workshops SAF also ties together all of Micro Hey y'all I just recorded my first video in my new 'Mark on Cybersecurity' YouTube channel! I started off with an episode describing free resources from Microsoft, The Open Group, and The Zero Trust Playbook that you can use to improve your cyber security program, metrics, risk management, architect I keep hearing people are "Automating Tier 1 with AI" (or some other job) and I think words really matter here. ◾ Are you trying to replace a human person with AI? Assigning a human role to AI? ◾ Are you automating the tasks currently being done by people? If you are trying to replace a person or ro Security can never “win the game” - it's not the job we signed up for. We are the defense squad so we don't score goals or points - we just keep opponents from scoring points. Our business colleagues and users are the offensive squads that score for our team through their jobs (hospitals saving One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics) Doing this successfully requires having a plan and a political toolbox to implement it. I have started putting one together based on what I see work at organizations.

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Mark Chick Mark Chick 18% Elton Barker Elton Barker 18% Mark Keierleber 🚴‍♂️🎸 Mark Keierleber 🚴‍♂️🎸 13% cob cob 11% andrewwillmott andrewwillmott 10% vindarel vindarel 10%

More like this

Find more →
Mastodon
andrewwillmott
andrewwillmott
@andrewwillmott@mastodon.gamedev.place
372 Followers
Mastodon
Mark Chick
Mark Chick
@durableace@social.vivaldi.net
372 Followers
Mastodon
Elton Barker
Elton Barker
@eltonteb@hcommons.social
372 Followers
Mastodon
cob
cob
@cobrate@mastodon.social
372 Followers
Mastodon
Mark Keierleber 🚴‍♂️🎸
Mark Keierleber 🚴‍♂️🎸
@mkeierleber@journa.host
372 Followers
Mastodon
vindarel
vindarel
@vindarel@framapiaf.org
372 Followers

✉ Message Mark Simos

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Mark Simos

Booking an event / appearance is a Pro feature. Upgrade to book Mark Simos for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Mark Simos gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.